On 2019-01-02 22:50:32 [+0100], To Witold Baryluk wrote: > "dmesg" should give you the output you look for. Like "apparmor: denied > $this because of $reason".
Could you please send me the dmesg output for your failure? I have an up-to-date sid system here with enabled apparmor and I can't reproduce the problem. All I see is: | audit: type=1400 audit(1546987681.334:13): apparmor="DENIED" operation="open" profile="/usr/sbin/clamd" name="/etc/ssl/openssl.cnf" pid=2408 comm="clamd" requested_mask="r" denied_mask="r" fsuid=102 ouid=0 | audit: type=1400 audit(1546987714.594:14): apparmor="DENIED" operation="open" profile="/usr/bin/freshclam" name="/etc/ssl/openssl.cnf" pid=2454 comm="freshclam" requested_mask="r" denied_mask="r" fsuid=0 ouid=0 and the logfile says: |-> freshclam daemon 0.100.2 (OS: linux-gnu, ARCH: x86_64, CPU: x86_64) |-> ClamAV update process started at Tue Jan 8 23:48:34 2019 |-> WARNING: Your ClamAV installation is OUTDATED! |-> WARNING: Local version: 0.100.2 Recommended version: 0.101.1 |-> DON'T PANIC! Read https://www.clamav.net/documents/upgrading-clamav |-> main.cld is up to date (version: 58, sigs: 4566249, f-level: 60, builder: sigmgr) |-> nonblock_connect: connect(): fd=4 errno=101: Network is unreachable |-> Can't connect to port 80 of host db.local.clamav.net (IP: 2606:4700::6810:ba8a) |-> Downloading daily-25281.cdiff [100%] |-> daily.cld updated (version: 25281, sigs: 2202390, f-level: 63, builder: raynman) |-> bytecode.cld is up to date (version: 328, sigs: 94, f-level: 63, builder: neo) |-> Database updated (6768733 signatures) from db.local.clamav.net (IP: 104.16.186.138) |-> Clamd successfully notified about the update. so it works… Sebastian
